Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31342e302f32342d3234203d3e20323730353737.roa
File:                     3138372e39342e31342e302f32342d3234203d3e20323730353737.roa (raw, json)
Hash identifier:          eBYm42+1W1fGcFwuZmXMRlKyQCOL5aYpZefRvtpQWhA=
Subject key identifier:   42:E4:57:66:9F:90:90:1E:5B:8C:AD:34:67:49:CD:87:FA:2B:53:24
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       2AD7C5033D19D40FE7BE084934161B9481AF21F0
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31342e302f32342d3234203d3e20323730353737.roa
Signing time:             Fri 31 Jan 2025 18:37:31 +0000
ROA not before:           Fri 31 Jan 2025 18:32:31 +0000
ROA not after:            Fri 30 Jan 2026 18:37:31 +0000
asID:                     270577
IP address blocks:        187.94.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d7:c5:03:3d:19:d4:0f:e7:be:08:49:34:16:1b:94:81:af:21:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Jan 31 18:32:31 2025 GMT
            Not After : Jan 30 18:37:31 2026 GMT
        Subject: CN=42E457669F90901E5B8CAD346749CD87FA2B5324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:21:7a:61:85:56:88:5f:89:c7:50:95:f8:17:
                    a1:71:90:e7:2b:1c:f2:56:a3:30:b6:7c:2e:be:01:
                    60:8b:3a:d1:c3:85:5f:4f:33:5b:cf:2c:33:96:aa:
                    96:be:c6:2b:57:95:3a:5a:85:c2:b9:9a:d4:05:33:
                    b8:75:33:c8:ea:f6:f8:b5:3a:bb:ec:62:a1:53:d3:
                    f5:07:c7:06:47:de:11:1b:3f:17:e9:20:8c:4c:96:
                    cc:9e:86:44:b2:1c:ab:fa:5d:ad:39:12:41:b7:e6:
                    07:1a:e5:44:b0:29:1f:6d:eb:2a:f3:3f:bd:26:48:
                    60:60:8d:b3:d8:fc:97:5f:75:49:da:bc:bc:f7:04:
                    27:86:18:24:4e:29:9e:51:74:b2:fb:e9:24:7f:46:
                    2f:07:06:d6:5b:8c:8f:64:46:15:67:fe:b9:08:34:
                    1f:22:23:7f:17:84:53:0c:95:8e:95:76:3a:ad:89:
                    c2:d1:d4:5e:88:1b:97:6e:6a:c5:a4:23:b5:f6:df:
                    e9:16:c1:f1:39:ad:e0:85:e6:d5:e6:9c:71:be:b7:
                    6b:35:64:c9:2a:a8:d8:d6:38:3b:37:42:98:75:2d:
                    e9:57:2f:6c:d0:06:cb:db:b0:b0:eb:28:45:63:0b:
                    01:1b:ba:19:a7:da:e6:4e:cc:9e:ab:c8:43:9a:be:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E4:57:66:9F:90:90:1E:5B:8C:AD:34:67:49:CD:87:FA:2B:53:24
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31342e302f32342d3234203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:57:59:a8:be:20:33:36:2d:ab:ed:29:2e:a1:ce:9c:97:fd:
         b6:11:a2:74:4f:dd:c5:90:52:3e:e4:5b:6e:5f:0f:4f:b6:9e:
         e6:e5:d3:f3:b1:60:21:63:7a:6b:02:d9:f2:bc:5e:74:05:fd:
         02:bb:5c:12:20:f1:c7:c2:92:5c:31:b0:1f:15:97:86:08:54:
         30:f5:a9:40:fb:84:05:60:c7:15:34:1c:69:49:4c:29:19:79:
         57:a7:2f:31:a3:2d:44:e0:e6:b4:3a:60:a6:9a:df:7a:96:e2:
         d8:0e:68:fb:fd:a6:15:34:5b:db:30:57:c1:4d:04:1f:ad:08:
         f0:14:86:bd:7c:a0:45:45:5a:86:9b:62:72:08:c9:57:e7:3c:
         75:f1:81:7f:36:d7:98:ea:44:f4:25:27:39:fa:15:db:4d:ce:
         54:1f:95:97:64:3d:c9:67:aa:9e:d4:6f:16:44:ef:18:30:c6:
         5a:96:dc:4e:17:59:e7:1d:0f:fa:a2:01:5d:6f:74:b5:7b:e5:
         91:a4:93:90:be:f6:87:08:68:25:21:35:bc:79:82:98:a2:9a:
         4e:ee:2a:68:23:0c:c6:26:8f:3f:80:26:d6:c0:15:f4:bb:e6:
         ae:2e:4a:4d:29:26:26:2d:26:cf:7e:3f:27:8a:da:8f:2d:b1:
         14:e6:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:03:06 2025 by rpki-client